← Database

CVE-2022-45857

MEDIUM CVSS: 6.5 Published: 2023-01-05 Modified: 2026-06-17

Description

An incorrect user management vulnerability [CWE-286] in the FortiManager version 6.4.6 and below VDOM creation component may allow an attacker to access a FortiGate without a password via newly created VDOMs after the super_admin account is deleted.

Affected Platforms

Fortinet Fortimanager

Weakness Type

CWE-286, NVD-CWE-Other

References